5 things, 20 minutes total:
Audit your app permissions
Stop reusing passwords
Use 2FA (the app, not SMS)
Lock down your email
Delete the old accounts you forgot existed
Do these. You're already ahead of 90% of people online.
Which one are you starting with? Comment 1, 2, 3, 4, or 5.